SR-D62949 · Issue 527502
XSS protection added
Resolved in Pega Version 8.4
The CrossScriptingFilter API has been applied to address a potential XSS issue related to stream rule parameters used in the request header.
SR-D63232 · Issue 524295
Support added for Authentication service rule attributes in embedded pages
Resolved in Pega Version 8.4
SSO login was not working, giving the error "Unable to process the SAML WebSSO request : No value specified for Attribute in SAML assertion". Investigation showed the Authentication service rule could only map attributes that are on the top level page and did not consider embedded page values. To resolve this, tools.getProperty will be used to fetch the property reference value instead of find Page and getString.
SR-D63727 · Issue 531726
Authorization header base 64 format error recategorized as debug logging
Resolved in Pega Version 8.4
Numerous messages were generated indicating that the Authorization Header format was invalid when using the format " : " (Base64 Og==) . As this is the default behavior for a particular class of proxy servers, the error statement has been updated to be logged as a debug statement and will be visible only when that logging is enabled.
SR-D71378 · Issue 533282
Authorization header base 64 format error recategorized as debug logging
Resolved in Pega Version 8.4
Numerous messages were generated indicating that the Authorization Header format was invalid when using the format " : " (Base64 Og==) . As this is the default behavior for a particular class of proxy servers, the error statement has been updated to be logged as a debug statement and will be visible only when that logging is enabled.
SR-D23164 · Issue 493797
Edit icon removed from deprecated custom skin styling
Resolved in Pega Version 8.4
Using custom styles as skin component is a deprecated feature as of Pega Platform v8.2. While existing styles will still be added to the CSS file when upgrading to or beyond this version, adding or updating custom skin styles is now handled through manual CSS files included in the skin. As part of this change, the edit icon for changing custom styles has been removed.
SR-D30944 · Issue 503233
Corrected pagination alignment in tabbed layout sourced from RD
Resolved in Pega Version 8.4
Pagination numbers were not being presented inline with the next/back arrows when using a tabbed table layout with source:report definition. To resolve this, the pyGridPaginator function has been added to Pega-Gadgets in Work- .
SR-D32698 · Issue 502739
Updated optimistic locking save to resolve exception
Resolved in Pega Version 8.4
When using Optimistic Locking, if the same work object was updated in another session in the middle of screenflow, the "save" button threw an exception on the screen and displayed the Review harness. This was traced to a change in the save API related to improved security, and has been corrected.
SR-D40938 · Issue 509686
Free form layout controls will be converted to dynamic layout
Resolved in Pega Version 8.4
After upgrade, a a pzActionDropdown control that was inside a pyActionDropdownSection was not visible anymore. Using the pzActionDropdown control directly worked as expected. Investigation showed that pyActionDropdownSection was using Freeform layout instead of the upgraded Dynamic Layout, and that the custom control was failing to generate the markup whenever drag/copy-paste was used for the control in any layout. To resolve this, the system has been updated so it will remove the control from a free form layout and use dynamic layout instead.
SR-D42334 · Issue 510592
Handling added to prevent Google Chrome double-localizing comma delim decimal input values
Resolved in Pega Version 8.4
When using Google Chrome with a localization that uses commas for the decimal separator, additional zeros were being added to values in the skin and corrupting entered values. This was traced to Google Chrome lacking support for the comma in the HTML5 element input type=”number”: this resulted in an entered number such as 1.0 being localized by the browser display as 1,0 but the actual input value was still being held as 1.0. When a refresh happened, the localization was applied again and the corruption was seen. To compensate for this, the action has been changed from refresh section to post value.
SR-D47477 · Issue 513725
Updated header left screen layout to remove extraneous checkbox
Resolved in Pega Version 8.4
In Google Chrome, resizing the portal so it showed the hamburger menu displayed an extra small square checkbox above the menu. This check box was caused by a font icon whose content value was present, but the selector was not assigned a font family because it was targeted for header left footer screen layout and not the header left screen layout. To resolve this, the selector has been modified to be more specific to header left screen layout.